$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a77014d-3b0d-4459-920e-5dd7019a54ba.roa File: 8a77014d-3b0d-4459-920e-5dd7019a54ba.roa (raw, json) Hash identifier: cpcyDsUsQT1hOK9Jdor6lQphLPp84QEpy5FnsKtffdo= Subject key identifier: 86:68:CA:DE:DF:CE:D2:8E:76:6F:23:F0:D3:F9:83:2F:D8:DC:68:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DC347A900E55F9FB94D04AAE975DEA2CE80E6EC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a77014d-3b0d-4459-920e-5dd7019a54ba.roa Signing time: Sat 18 Oct 2025 12:43:35 +0000 ROA not before: Sat 18 Oct 2025 12:43:35 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c3:47:a9:00:e5:5f:9f:b9:4d:04:aa:e9:75:de:a2:ce:80:e6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:43:35 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e5ff08a512dd1ac17e71ac601ec4f8875e07ef4872b80cebd33e6ffe5aadcffc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:3c:69:a4:cc:ed:b2:24:dc:5d:14:b7:15: d7:43:bc:f7:e6:98:5f:ee:9f:05:3f:5b:05:b0:71: e7:14:1e:e8:b0:00:54:2d:13:0e:60:37:8c:76:54: 37:b4:2e:08:32:f1:56:1e:09:01:6c:3d:4f:e1:23: ad:db:a8:b3:97:96:7e:6a:d9:cd:ad:b0:be:16:a2: 74:51:af:8f:cc:fe:15:18:78:aa:b0:93:d0:1b:5d: c5:91:3e:ca:11:b8:7b:21:54:6f:31:62:bb:5d:37: 71:03:0e:95:6e:f1:f2:8e:9d:36:46:70:90:05:73: ea:53:33:9d:ca:33:26:4e:1e:63:94:53:2d:43:16: 08:0c:3c:8e:d3:2d:25:ae:1b:f6:1c:7f:ee:a6:11: 8f:53:af:56:1a:f4:f4:ae:4b:b8:83:a0:67:23:96: ca:db:67:1e:ae:a2:54:96:68:bc:47:86:15:94:65: 39:19:62:32:02:6c:aa:0a:90:f3:80:b3:e1:b3:dc: 68:60:1c:fa:59:32:b7:16:9e:82:a5:6f:98:5d:60: ec:b6:60:41:0e:5d:62:4f:4d:24:97:80:f7:61:4a: 07:5a:54:9b:f3:9e:5b:3e:42:9e:6d:2e:1c:63:6a: 8b:89:88:c2:3b:76:08:21:03:b3:10:28:6b:e8:c1: 73:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:68:CA:DE:DF:CE:D2:8E:76:6F:23:F0:D3:F9:83:2F:D8:DC:68:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a77014d-3b0d-4459-920e-5dd7019a54ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.0.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:f5:d9:f5:7c:cc:3b:fc:58:0e:13:33:e2:1f:7a:1f:5f:ea: f0:50:bf:2e:da:3f:84:bf:68:87:56:ef:4b:4b:28:a0:ca:16: ed:1f:5b:6a:53:0e:47:bf:85:ca:7f:ea:d9:82:ae:70:8a:b9: 9c:3d:4a:df:3c:be:38:7b:64:7e:f3:02:15:6a:e9:08:e2:3b: a5:5d:d7:71:ce:8d:00:ca:69:47:53:26:9c:7c:14:3c:52:5f: 09:c0:37:fa:aa:f5:f7:94:7d:0f:10:e5:32:e2:40:27:ed:f5: 51:33:2c:e9:9c:66:7e:46:4e:72:83:99:be:25:bf:2d:73:22: 29:de:9f:d3:c7:6a:03:38:e4:82:72:ab:1b:81:1e:cf:d1:7a: f6:4b:1d:96:d3:a4:ba:97:ab:b0:91:3c:28:5f:ec:a7:62:63: a8:72:2c:03:2f:ca:07:7d:af:9f:43:52:af:b0:8d:74:70:64: 43:cf:83:c5:cb:e3:38:a8:b8:52:da:11:22:46:0c:e8:49:cc: 9d:02:70:63:42:62:86:d3:49:ab:83:95:3d:3b:95:a4:72:70: 32:dd:13:c1:87:12:98:53:59:12:a5:4a:02:4c:85:a5:75:c7: 96:c6:75:f6:da:5b:27:a3:f0:03:7e:98:77:98:51:9d:f9:42: 84:3c:4a:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbcNHqQDlX5+5TQSq6XXeos6A5uwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTI0MzM1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWZmMDhhNTEyZGQxYWMxN2U3MWFjNjAxZWM0Zjg4NzVl MDdlZjQ4NzJiODBjZWJkMzNlNmZmZTVhYWRjZmZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC68TxppMztsiTcXRS3FddDvPfmmF/unwU/WwWwcecUHuiw AFQtEw5gN4x2VDe0Lggy8VYeCQFsPU/hI63bqLOXln5q2c2tsL4WonRRr4/M/hUY eKqwk9AbXcWRPsoRuHshVG8xYrtdN3EDDpVu8fKOnTZGcJAFc+pTM53KMyZOHmOU Uy1DFggMPI7TLSWuG/Ycf+6mEY9Tr1Ya9PSuS7iDoGcjlsrbZx6uolSWaLxHhhWU ZTkZYjICbKoKkPOAs+Gz3GhgHPpZMrcWnoKlb5hdYOy2YEEOXWJPTSSXgPdhSgda VJvznls+Qp5tLhxjaouJiMI7dgghA7MQKGvowXPPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhmjK3t/O0o52byPw0/mDL9jcaPQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhNzcwMTRkLTNiMGQtNDQ1OS05MjBlLTVkZDcwMTlhNTRiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQN+QAwDQYJKoZIhvcNAQELBQADggEBACr12fV8zDv8WA4TM+Ifeh9f6vBQ vy7aP4S/aIdW70tLKKDKFu0fW2pTDke/hcp/6tmCrnCKuZw9St88vjh7ZH7zAhVq 6QjiO6Vd13HOjQDKaUdTJpx8FDxSXwnAN/qq9feUfQ8Q5TLiQCft9VEzLOmcZn5G TnKDmb4lvy1zIinen9PHagM45IJyqxuBHs/RevZLHZbTpLqXq7CRPChf7KdiY6hy LAMvygd9r59DUq+wjXRwZEPPg8XL4ziouFLaESJGDOhJzJ0CcGNCYobTSauDlT07 laRycDLdE8GHEphTWRKlSgJMhaV1x5bGdfbaWyej8AN+mHeYUZ35QoQ8SiQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:37 2025 by rpki-client